CVE-2019-3633

CVE-2019-3633 concerns the McAfee Data Loss Prevention Endpoint (DLPe) for Windows 11.x prior to 11.3.2.8. A buffer overflow in DLPe allows a local user to trigger a Windows blue screen by sending a crafted message, bypassing internal checks and causing DLPe to read unallocated memory. Public det...

PT-2019-16641 · Microsoft +1 · Windows +1

Name of the Vulnerable Software and Affected Versions: McAfee Data Loss Prevention DLPe for Windows versions prior to 11.3.2.8 Description: The issue allows a local user to cause the Windows operating system to crash via an encrypted message sent to DLPe, which when decrypted results in DLPe...

McAfee Web Gateway Input Validation Error Vulnerability

McAfee Web Gateway MWG is a security gateway product from McAfee USA. The product provides threat protection, application control, and data loss prevention. An input validation error vulnerability exists in the administrator web console in McAfee MWG versions 7.8.2.x prior to 7.8.2.12, which can ...

McAfee Web Gateway Information Disclosure Vulnerability (CNVD-2020-17035)

McAfee Web Gateway MWG is a security gateway product from McAfee USA. The product provides threat protection, application control, and data loss prevention. An information disclosure vulnerability exists in McAfee MWG versions 7.8.2.x prior to 7.8.2.12, which can be exploited by an attacker to...

CVE-2019-3635

Exfiltration of Data in McAfee Web Gateway MWG 7.8.2.x prior to 7.8.2.12 allows attackers to obtain sensitive data via crafting a complex webpage that will trigger the Web Gateway to block the user accessing an iframe...

CVE-2019-3637

Privilege Escalation vulnerability in McAfee FRP 5.x prior to 5.1.0.209 allows local users to gain elevated privileges via running McAfee Tray with elevated privileges...

CVE-2019-3639

Clickjack vulnerability in Adminstrator web console in McAfee Web Gateway MWG 7.8.2.x prior to 7.8.2.12 allows remote attackers to conduct clickjacking attacks via a crafted web page that contains an iframe via does not send an X-Frame-Options HTTP header...

CVE-2019-3637

Privilege Escalation vulnerability in McAfee FRP 5.x prior to 5.1.0.209 allows local users to gain elevated privileges via running McAfee Tray with elevated privileges...

CVE-2019-3639

Clickjack vulnerability in Adminstrator web console in McAfee Web Gateway MWG 7.8.2.x prior to 7.8.2.12 allows remote attackers to conduct clickjacking attacks via a crafted web page that contains an iframe via does not send an X-Frame-Options HTTP header...

CVE-2019-3635

Exfiltration of Data in McAfee Web Gateway MWG 7.8.2.x prior to 7.8.2.12 allows attackers to obtain sensitive data via crafting a complex webpage that will trigger the Web Gateway to block the user accessing an iframe...

Privilege escalation

Privilege Escalation vulnerability in McAfee FRP 5.x prior to 5.1.0.209 allows local users to gain elevated privileges via running McAfee Tray with elevated privileges...

Design/Logic Flaw

Clickjack vulnerability in Adminstrator web console in McAfee Web Gateway MWG 7.8.2.x prior to 7.8.2.12 allows remote attackers to conduct clickjacking attacks via a crafted web page that contains an iframe via does not send an X-Frame-Options HTTP header...

Information disclosure

Exfiltration of Data in McAfee Web Gateway MWG 7.8.2.x prior to 7.8.2.12 allows attackers to obtain sensitive data via crafting a complex webpage that will trigger the Web Gateway to block the user accessing an iframe...

CVE-2019-3637

CVE-2019-3637 affects McAfee FRP 5.x before 5.1.0.209. The vulnerability is a local privilege escalation: a low-privilege user can obtain elevated rights by running McAfee Tray with elevated privileges. The connected documents consistently describe this as a local privilege escalation in FRP 5.x,...

CVE-2019-3637 Privilege Escalation vulnerability in FRP 5.x earlier than 5.1.0.209

Privilege Escalation vulnerability in McAfee FRP 5.x prior to 5.1.0.209 allows local users to gain elevated privileges via running McAfee Tray with elevated privileges...

CVE-2019-3639

CVE-2019-3639 describes a clickjacking vulnerability in the McAfee Web Gateway (MWG) UI. Affects MWG version 7.8.2.x prior to 7.8.2.12, where an administrator web console does not send an X-Frame-Options header, enabling remote attackers to embed the console in a crafted page via an iframe. The i...

CVE-2019-3635

CVE-2019-3635 affects McAfee Web Gateway (MWG) versions 7.8.2.x prior to 7.8.2.12. The flaw allows an attacker to exfiltrate sensitive data by crafting a complex webpage that triggers MWG to block a user from accessing an iframe, enabling information disclosure. Root cause details are not elabora...

CVE-2019-3635 MWG Proxy: Cross-Frame Scripting vulnerability

Exfiltration of Data in McAfee Web Gateway MWG 7.8.2.x prior to 7.8.2.12 allows attackers to obtain sensitive data via crafting a complex webpage that will trigger the Web Gateway to block the user accessing an iframe...

PT-2019-3137 · Mcafee · Mcafee Web Gateway

Name of the Vulnerable Software and Affected Versions: McAfee Web Gateway versions 7.8.2.x prior to 7.8.2.12 Description: The issue is related to the lack of protection for internal data in the McAfee Web Gateway. It allows a remote attacker to disclose protected information using a specially...

HTTP/2 CVE-2019-9517 Remote Denial of Service Vulnerability

Description HTTP/2 is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to consume excess memory, denying service to legitimate users. Technologies Affected Apache Apache 2.4.20 Apache Apache 2.4.23 Apache Apache 2.4.25 Apache Apache 2.4.26 Apache Apache 2.4.27...